Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Updated 22 Oct 2026, 11:29 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-4789 blocks this version. Package presents itself as the legitimate slopus/happy CLI (README instructs `npm install -g happy`; homepage, repository,...
OpenSSF/OSV malware advisory MAL-2025-47047 blocks this version. The package @self-sell/store was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2025-47046 blocks this version. The package @self-sell/self-sell-amplitude-events was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2025-47045 blocks this version. The package @self-sell/guards was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2025-47051 blocks this version. The package @team-event/v2 was found to contain malicious code.